CVE-2026-10534

Received Received - Intake

Buffer Overflow in IBM Db2 via IXF IMPORT Parser

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: IBM Corporation

Description

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-12

Generated

2026-08-13

AI Q&A

2026-08-13

EPSS Evaluated

N/A

NVD

CVE-2026-10534

EUVD

EUVD-2026-57600

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	db2	From 11.5.0 (inc) to 11.5.9 (inc)
ibm	db2	From 12.1.0 (inc) to 12.1.5 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 have a buffer overflow vulnerability in the IXF IMPORT parser. This flaw could allow an attacker to execute arbitrary code or cause a denial of service by sending specially crafted input.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized access, data breaches, system crashes, or further network compromise. Attackers might gain control over affected systems or steal sensitive information.

Compliance Impact

This vulnerability could lead to data breaches, which may violate GDPR, HIPAA, or other regulations. Non-compliance risks include fines, legal penalties, and reputational damage due to unauthorized data exposure.

Mitigation Strategies

Apply the latest IBM Db2 patches or updates to versions beyond 11.5.9 or 12.1.5 to address the buffer overflow in the IXF IMPORT parser.

Hi! I’m here to help you understand CVE-2026-10534. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70